linux_6.0.12-1~bpo11+1_source.changes ACCEPTED into bullseye-backports
Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 19 Dec 2022 15:14:58 +0100
Source: linux
Architecture: source
Version: 6.0.12-1~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 1022544 1022848 1022900 1023025 1023167 1023298 1023329 1023450 1023613 1023726 1024070 1024328
Changes:
linux (6.0.12-1~bpo11+1) bullseye-backports; urgency=medium
.
* Rebuild for bullseye-backports:
- Change ABI number to 0.deb11.6
.
linux (6.0.12-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.11
- [arm*] binder: validate alloc->mm in ->mmap() handler
- ceph: Use kcalloc for allocating multiple elements
- ceph: fix NULL pointer dereference for req->r_session
- wifi: mac80211: fix memory free error when registering wiphy fail
- wifi: cfg80211: Fix bitrates overflow issue
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
- [riscv64] dts: sifive unleashed: Add PWM controlled LEDs
- audit: fix undefined behavior in bit shift for AUDIT_BIT
- wifi: airo: do not assign -1 to unsigned char
- wifi: mac80211: Fix ack frame idr leak when mesh has no route
- wifi: ath11k: Fix QCN9074 firmware boot on x86
- [s390x] zcrypt: fix warning about field-spanning write
- [armhf] spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for
every run
- Revert "net: macsec: report real_dev features when HW offloading is
enabled"
- [x86] ACPI: video: Add backlight=native DMI quirk for Dell G15 5515
- [x86] platform/x86: ideapad-laptop: Disable touchpad_switch
- [x86] platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2
2-in-1
- [x86] platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
- [x86] platform/x86/intel/hid: Add some ACPI device IDs
- [powerpc*] scsi: ibmvfc: Avoid path failures during live migration
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- [s390x] always build relocatable kernel
- [arm64] syscall: Include asm/ptrace.h in syscall_wrapper header.
- nvme: quiet user passthrough command errors
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked
- net: wwan: iosm: fix kernel test robot reported errors
- drm/amd/display: Zeromem mypipe heap struct before using it
- drm/amd/display: Fix FCLK deviation and tool compile issues
- drm/amd/display: Fix gpio port mapping issue
- Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10
properly""
- drm/amdgpu: Drop eviction lock when allocating PT BO
- drm/amd/display: only fill dirty rectangles when PSR is enabled
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue
- [riscv64] vdso: Do not add missing symbols to version section in linker
script
- [mips*] pic32: treat port as signed integer
- io_uring/poll: lockdep annote io_poll_req_insert_locked
- xfrm: fix "disable_policy" on ipv4 early demux
- [arm64] dts: rockchip: fix quartz64-a bluetooth configuration
- xfrm: replay: Fix ESN wrap around for GSO
- af_key: Fix send_acquire race with pfkey_register
- [arm64,armhf] ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
- ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
- [x86] hyperv: Restore VP assist page after cpu offlining/onlining
- scsi: storvsc: Fix handling of srb_status and capacity change events
- [amd64,arm64] PCI: hv: Only reuse existing IRTE allocation for Multi-MSI
- [arm64] dts: rockchip: Fix Pine64 Quartz4-B PMIC interrupt
- [x86] ASoC: max98373: Add checks for devm_kcalloc
- regulator: core: fix kobject release warning and memory leak in
regulator_register()
- regulator: core: fix UAF in destroy_regulator()
- [arm64,armhf] bus: sunxi-rsb: Remove the shutdown callback
- [arm64,armhf] bus: sunxi-rsb: Support atomic transfers
- [arm64] tee: optee: fix possible memory leak in optee_register_device()
- net: liquidio: simplify if expression
- ipvlan: hold lower dev to avoid possible use-after-free
- rxrpc: Fix race between conn bundle lookup and bundle removal
[ZDI-CAN-15975]
- nfc/nci: fix race with opening and closing
- [i386] net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
- netfilter: conntrack: Fix data-races around ct mark
- netfilter: nf_tables: do not set up extensions for end interval
- iavf: Fix a crash during reset task
- iavf: Do not restart Tx queues after reset task failure
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly
- iavf: Fix race condition between iavf_shutdown and iavf_remove
- [armhf] dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
- net/mlx4: Check retval of mlx4_bitmap_init
- [arm64,armhf] net: mvpp2: fix possible invalid pointer dereference
- net/qla3xxx: fix potential memleak in ql3xxx_send()
- [i386] net: pch_gbe: fix pci device refcount leak while module exiting
- nfp: fill splittable of devlink_port_attrs correctly
- nfp: add port from netdev validation for EEPROM access
- bonding: fix ICMPv6 header handling when receiving IPv6 messages
- macsec: Fix invalid error code set
- [x86] drm/i915: Fix warn in intel_display_power_*_domain() functions
- Drivers: hv: vmbus: fix double free in the error path of
vmbus_add_channel_work()
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
- netfilter: ipset: regression in ip_set_hash_ip.c
- net/mlx5: Do not query pci info while pci disabled
- net/mlx5: Fix FW tracer timestamp calculation
- net/mlx5: SF: Fix probing active SFs during driver probe phase
- net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint
- net/mlx5: Fix handling of entry refcount when command is not issued to FW
- net/mlx5: E-Switch, Set correctly vport destination
- net/mlx5: Fix sync reset event handler error flow
- net/mlx5e: Offload rule only when all encaps are valid
- net: phy: at803x: fix error return code in at803x_probe()
- tipc: set con sock in tipc_conn_alloc
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: check skb_linearize() return value in tipc_disc_rcv()
- zonefs: Fix race between modprobe and mount
- xfrm: Fix oops in __xfrm_state_delete()
- xfrm: Fix ignored return value in xfrm6_init()
- net: wwan: iosm: use ACPI_FREE() but not kfree() in
ipc_pcie_read_bios_cfg()
- sfc: fix potential memleak in __ef100_hard_start_xmit()
- net: sched: allow act_ct to be built without NF_NAT
- NFC: nci: fix memory leak in nci_rx_data_packet()
- [armhf] regulator: twl6030: re-add TWL6032_SUBCLASS
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
- [x86] cpufreq: amd-pstate: change amd-pstate driver to be built-in type
- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
- netfilter: flowtable_offload: add missing locking
- fs: do not update freeing inode i_io_list
- blk-mq: fix queue reference leak on blk_mq_alloc_disk_for_queue failure
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
- ipv4: Fix error return code in fib_table_insert()
- [x86] arcnet: fix potential memory leak in com20020_probe()
- [s390x] ap: fix memory leak in ap_init_qci_info()
- [s390x] dasd: fix no record found for raw_track_access
- fscache: fix OOB Read in __fscache_acquire_volume
- [arm64] net: enetc: cache accesses to &priv->si->hw
- [arm64] net: enetc: preserve TX ring priority across reconfiguration
- virtio_net: Fix probe failed when modprobe virtio_net
- [arm64] net: thunderx: Fix the ACPI memory leak
- io_uring/filetable: fix file reference underflow
- io_uring/poll: fix poll_refs race with cancelation
- lib/vdso: use "grep -E" instead of "egrep"
- can: gs_usb: remove dma allocations
- [armhf] usb: dwc3: exynos: Fix remove() function
- cifs: fix missing unlock in cifs_file_copychunk_range()
- cifs: Use after free in debug code
- ext4: fix use-after-free in ext4_ext_shift_extents
- [arm64] dts: rockchip: lower rk3399-puma-haikou SD controller clock
frequency
- [armhf] iio: adc: aspeed: Remove the trim valid dts property.
- iio: light: apds9960: fix wrong register for gesture gain
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
- iio: accel: bma400: Fix memory leak in bma400_get_steps_reg()
- [amd64] virt/sev-guest: Prevent IV reuse in the SNP guest driver
- [x86] cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL
register at init
- zonefs: Fix active zone accounting
- [arm64,armhf] spi: spi-imx: Fix spi_bus_clk if requested clock is higher
than input clock
- [arm64,armhf] spi: spi-imx: spi_imx_transfer_one(): check for DMA transfer
first
- NFSD: Fix reads with a non-zero offset that don't end on a page boundary
- drm/amdgpu: Enable SA software trap.
- drm/amd/display: Added debug option for forcing subvp num ways
- drm/amd/display: Add debug option for allocating extra way for cursor
- drm/amd/display: Update MALL SS NumWays calculation
- drm/amd/display: Fix calculation for cursor CAB allocation
- [arm64,armhf] usb: dwc3: gadget: conditionally remove requests
- [arm64,armhf] usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
- [arm64,armhf] usb: dwc3: gadget: Clear ep descriptor last
- io_uring: cmpxchg for poll arm refs release
- io_uring: make poll refs more robust
- io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1
- mm: vmscan: fix extreme overreclaim and swap floods
- [x86] KVM: x86/mmu: Fix race condition in direct_page_fault
(CVE-2022-45869)
- [x86] KVM: x86/xen: Only do in-kernel acceleration of hypercalls for guest
CPL0
- [x86] KVM: x86/xen: Validate port number in SCHEDOP_poll
- [x86] drm/i915/gvt: Get reference to KVM iff attachment to VM is
successful
- [x86] KVM: x86: nSVM: leave nested mode on vCPU free
- [x86] KVM: x86: forcibly leave nested mode on vCPU reset (CVE-2022-3344)
- [x86] KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while
still in use (CVE-2022-3344)
- [x86] KVM: x86: add kvm_leave_nested
- [x86] KVM: x86: remove exit_int_info warning in svm_handle_exit
- [x86] KVM: Update gfn_to_pfn_cache khva when it moves within the same page
- [x86] tsx: Add a feature bit for TSX control MSR support
- [x86] pm: Add enumeration check before spec MSRs save/restore setup
- [x86] ioremap: Fix page aligned size calculation in __ioremap_caller()
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- mm: correctly charge compressed memory to its memcg
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
- [x86] ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table
- [x86] ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
- [x86] ASoC: Intel: soc-acpi: add ES83x6 support to IceLake
- ASoC: hda: intel-dsp-config: add ES83x6 quirk for IceLake
- [x86] ASoC: SOF: ipc3-topology: use old pipeline teardown flow with SOF2.1
and older
- Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
- Revert "tty: n_gsm: replace kicktimer with delayed_work"
- Input: goodix - try resetting the controller when no config is set
- bpf: Convert BPF_DISPATCHER to use static_call() (not ftrace)
- [x86] Input: soc_button_array - add use_low_level_irq module parameter
- [x86] Input: soc_button_array - add Acer Switch V 10 to
dmi_use_low_level_irq[]
- Input: i8042 - apply probe defer to more ASUS ZenBook models
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
- [x86] xen/platform-pci: add missing free_irq() in error path
- [x86] platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine
type
- [x86] platform/x86: asus-wmi: add missing pci_dev_put() in
asus_wmi_set_xusb2pr()
- [x86] platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10
(SW5-017)
- [x86] platform/surface: aggregator_registry: Add support for Surface Pro 9
- drm/amd/display: use uclk pstate latency for fw assisted mclk validation
dcn32
- drm/amdgpu: disable BACO support on more cards
- zonefs: fix zone report size in __zonefs_io_error()
- [x86] platform/surface: aggregator_registry: Add support for Surface
Laptop 5
- [x86] platform/x86: hp-wmi: Ignore Smart Experience App event
- [x86] platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle
on some Yoga laptops
- [x86] platform/x86: ideapad-laptop: Add module parameters to match DMI
quirk tables
- tcp: configurable source port perturb table size
- block: make blk_set_default_limits() private
- dm-integrity: set dma_alignment limit in io_hints
- dm-log-writes: set dma_alignment limit in io_hints
- net: usb: qmi_wwan: add Telit 0x103a composition
- scsi: iscsi: Fix possible memory leak when device_register() failed
- [arm64,armhf] gpu: host1x: Avoid trying to use GART on Tegra20
- dm integrity: flush the journal on suspend
- dm integrity: clear the journal on suspend
- fuse: lock inode unconditionally in fuse_fallocate()
- btrfs: free btrfs_path before copying root refs to userspace
- btrfs: free btrfs_path before copying inodes to userspace
- btrfs: free btrfs_path before copying fspath to userspace
- btrfs: free btrfs_path before copying subvol info to userspace
- btrfs: zoned: fix missing endianness conversion in sb_write_pointer
- btrfs: use kvcalloc in btrfs_get_dev_zone_info
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
- btrfs: do not modify log tree while holding a leaf from fs tree locked
- [x86] drm/i915/ttm: never purge busy objects
- drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
- drm/amd/display: No display after resume from WB/CB
- drm/amdgpu/psp: don't free PSP buffers on suspend
- drm/amdgpu: Enable Aldebaran devices to report CU Occupancy
- drm/amd/amdgpu: reserve vm invalidation engine for firmware
- drm/amd/display: Update soc bounding box for dcn32/dcn321
- drm/amdgpu: always register an MMU notifier for userptr
- drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info
correctly when the edid is read"
- bpf: Add explicit cast to 'void *' for __BPF_DISPATCHER_UPDATE()
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12
- btrfs: qgroup: fix sleep from invalid context bug in
btrfs_qgroup_inherit()
- drm/amdgpu: move setting the job resources
- drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos
- drm/amdgpu: fix userptr HMM range handling v2
- drm/amd/pm: add smu_v13_0_10 driver if version
- drm/amd/pm: update driver-if header for smu_v13_0_10
- drm/amd/pm: update driver if header for smu_13_0_7
- [arm64] clk: qcom: gdsc: add missing error handling
- [arm64] clk: qcom: gdsc: Remove direct runtime PM calls
- bpf, perf: Use subprog name when reporting subprog ksymbol
- scripts/faddr2line: Fix regression in name resolution on ppc64le
- [x86] hwmon: (i5500_temp) fix missing pci_disable_device()
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- [arm64,armhf] clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL
register math error
- bpf: Do not copy spin lock field from user in bpf_selem_alloc
- of: property: decrement node refcount in of_fwnode_get_reference_args()
- ixgbevf: Fix resource leak in ixgbevf_init_module()
- i40e: Fix error handling in i40e_init_module()
- iavf: Fix error handling in iavf_init_module()
- e100: Fix possible use after free in e100_xmit_prepare
- net/mlx5: DR, Fix uninitialized var warning
- net/mlx5: E-switch, Destroy legacy fdb table when needed
- net/mlx5: E-switch, Fix duplicate lag creation
- net/mlx5: Fix uninitialized variable bug in outlen_write()
- net/mlx5e: Fix use-after-free when reverting termination table
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
- [i386] can: cc770: cc770_isa_probe(): add missing free_cc770dev()
- vfs: fix copy_file_range() averts filesystem freeze protection
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
- aquantia: Do not purge addresses when setting the number of rings
- wifi: cfg80211: fix buffer overflow in elem comparison
- wifi: cfg80211: don't allow multi-BSSID in S1G
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
- net: phy: fix null-ptr-deref while probe() failed
- net: net_netdev: Fix error handling in ntb_netdev_init_module()
- net/9p: Fix a potential socket leak in p9_socket_open
- net: wwan: iosm: fix kernel test robot reported error
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
- net: wwan: iosm: fix crash in peek throughput test
- net: wwan: iosm: fix incorrect skb length
- mptcp: don't orphan ssk in mptcp_close()
- mptcp: fix sleep in atomic at close time
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdiobus: fix unbalanced node reference count
- afs: Fix fileserver probe RTT handling
- net: tun: Fix use-after-free in tun_detach()
- net/mlx5: Lag, Fix for loop when checking lag
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
- sctp: fix memory leak in sctp_stream_outq_migrate()
- afs: Fix server->active leak in afs_put_server
- [x86] hwmon: (coretemp) Check for null before removing sysfs attrs
- [x86] hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- [x86] hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
- [riscv64] vdso: fix section overlapping under some conditions
- [riscv64] mm: Proper page permissions after initmem free
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- [x86] bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from
S3
- [x86] pinctrl: intel: Save and restore pins in "direct IRQ" mode
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
- mm: migrate: fix THP's mapcount on isolation
- net: stmmac: Set MAC's flow control register to reflect current settings
- mmc: core: Fix ambiguous TRIM and DISCARD arg
- [amd64,armhf] mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
- mmc: sdhci: Fix voltage switch delay
- drm/amdgpu: temporarily disable broken Clang builds due to blown
stack-frame
- drm/amdgpu: enable Vangogh VCN indirect sram mode
- [x86] drm/i915: Fix negative value passed as remaining time
- [x86] drm/i915: Never return 0 if not all requests retired
- tracing/osnoise: Fix duration type
- tracing: Fix race where histograms can be called before the event
- tracing: Free buffers when a used dynamic event is removed
- ASoC: ops: Fix bounds check for _sx controls
- [arm64,armhf] pinctrl: single: Fix potential division by zero
- [riscv64] Sync efi page table's kernel mappings before switching
- [riscv64] fix race when vmap stack overflow
- [riscv64] kexec: Fixup irq controller broken in kexec crash path
- nvme: fix SRCU protection of nvme_ns_head list
- [amd64] iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
- [amd64] iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- ipv4: Handle attempt to delete multipath route when fib_info contains an
nh reference (CVE-2022-3435)
- ipv4: Fix route deletion when nexthop info is not specified
- i2c: Restore initial power state if probe fails
- [arm64] i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
- [arm64,armhf] i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
- [amd64,arm64] ACPI: HMAT: remove unnecessary variable initialization
- [amd64,arm64] ACPI: HMAT: Fix initiator registration for single-initiator
systems
- char: tpm: Protect tpm_pm_suspend with locks
- ipc/sem: Fix dangling sem_array access in semtimedop race
- proc: avoid integer type confusion in get_proc_long
- proc: proc_skip_spaces() shouldn't think it is working on C strings
.
[ Salvatore Bonaccorso ]
* [rt] Refresh "serial: 8250: implement write_atomic"
* Bump ABI to 6
* [s390x] debian/config: Drop explicit enable of RELOCATABLE.
* [x86] drivers/cpufreq: Change X86_AMD_PSTATE from module to built-in
* xen/netback: Ensure protocol headers don't fall in the non-linear area
(XSA-423, CVE-2022-3643)
* xen/netback: don't call kfree_skb() with interrupts disabled (XSA-424,
CVE-2022-42328, CVE-2022-42329)
.
linux (6.0.10-2) unstable; urgency=medium
.
* [x86] drm/i915: fix TLB invalidation for Gen12 video and compute engines
(CVE-2022-4139)
.
linux (6.0.10-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.9
- [x86] thunderbolt: Add DP OUT resource when DP tunnel is discovered
- [x86] drm/i915/gvt: Add missing vfio_unregister_group_dev() call
- KVM: debugfs: Return retval of simple_attr_open() if it fails
- [x86] drm/i915: Allow more varied alternate fixed modes for panels
- [x86] drm/i915: Simplify intel_panel_add_edid_alt_fixed_modes()
- [x86] drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid
WARNs
- drm/amd/display: Acquire FCLK DPM levels on DCN32
- drm/amd/display: Limit dcn32 to 1950Mhz display clock
- drm/amd/display: Set memclk levels to be at least 1 for dcn32
- HID: wacom: Fix logic used for 3rd barrel switch emulation
- [armhf] phy: stm32: fix an error code in probe
- wifi: cfg80211: silence a sparse RCU warning
- wifi: cfg80211: fix memory leak in query_regdb_file()
- soundwire: qcom: reinit broadcast completion
- soundwire: qcom: check for outanding writes before doing a read
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf, sockmap: Fix the sk->sk_forward_alloc warning of
sk_stream_kill_queues
- wifi: mac80211: fix general-protection-fault in
ieee80211_subif_start_xmit()
- wifi: mac80211: Set TWT Information Frame Disabled bit as 1
- bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without
FILE
- [x86,arm64] HID: hyperv: fix possible memory leak in mousevsc_probe()
- [arm*] drm/vc4: hdmi: Fix HSM clock too low on Pi4
- bpf, sock_map: Move cancel_work_sync() out of sock lock
- [amd64,arm64] PCI: hv: Fix the definition of vector in
hv_compose_msi_msg()
- bpf: Add helper macro bpf_for_each_reg_in_vstate
- bpf: Fix wrong reg type conversion in release_reference()
- net: gso: fix panic on frag_list with mixed head alloc types
- macsec: delete new rxsc when offload fails
- macsec: fix secy->n_rx_sc accounting
- macsec: fix detection of RXSCs when toggling offloading
- macsec: clear encryption keys from the stack after setting up offload
- net: tun: Fix memory leaks of napi_get_frags
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- [s390x] KVM: s390: pv: don't allow userspace to set the clock under PV
- [s390x] KVM: s390: pci: Fix allocation size of aift kzdev elements
- hamradio: fix issue of dev reference count leakage in bpq_device_event()
- [amd64] net: wwan: iosm: fix memory leak in ipc_wwan_dellink
- net: wwan: mhi: fix memory leak in mhi_mbim_dellink
- [arm*] drm/vc4: Fix missing platform_unregister_drivers() call in
vc4_drm_register()
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- [x86] platform/x86: p2sb: Don't fail if unknown CPU is found
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- can: af_can: fix NULL pointer dereference in can_rx_register()
- [x86] drm/i915/psr: Send update also on invalidate
- [x86] drm/i915: Do not set cache_dirty for DGFX
- [arm64,armhf] net: stmmac: dwmac-meson8b: fix
meson8b_devm_clk_prepare_enable()
- tipc: fix the msg->req tlv len check in
tipc_nl_compat_name_table_dump_header
- [amd64] dmanegine: idxd: reformat opcap output to match bitmap_parse()
input
- [amd64] dmaengine: idxd: Fix max batch size for Intel IAA
- [amd64] dmaengine: idxd: fix RO device state error after been
disabled/reset
- [arm64] dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- [armhf] dmaengine: stm32-dma: fix potential race between pause and resume
- [arm64] drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open()
- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
- net: tun: call napi_schedule_prep() to ensure we own a napi
- [amd64] net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
- [amd64] net: wwan: iosm: fix invalid mux header type
- net/mlx5: Bridge, verify LAG state when adding bond to bridge
- net/mlx5: Allow async trigger completion execution on single CPU systems
- net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode
- net/mlx5: fw_reset: Don't try to load device in case PCI isn't working
- net/mlx5e: Add missing sanity checks for max TX WQE size
- net/mlx5e: Fix tc acts array not to be dependent on enum order
- net/mlx5e: TC, Fix wrong rejection of packet-per-second policing
- net/mlx5e: E-Switch, Fix comparing termination table instance
- ice: Fix spurious interrupt during removal of trusted VF
- iavf: Fix VF driver counting VLAN 0 filters
- [armhf] net: cpsw: disable napi in cpsw_ndo_open()
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
- [x86] stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz
- mctp: Fix an error handling path in mctp_init()
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
cxgb4vf_open()
- net: phy: mscc: macsec: clear encryption keys when freeing a flow
- net: atlantic: macsec: clear encryption keys from the stack
- ethernet: s2io: disable napi when start nic failed in s2io_card_up()
- [armel,armhf] net: mv643xx_eth: disable napi when init rxq or txq failed
in mv643xx_eth_open()
- ALSA: memalloc: Don't fall back for SG-buffer with IOMMU
- net: macvlan: fix memory leaks of macvlan_common_newlink
- [riscv64] process: fix kernel info leakage
- [riscv64] vdso: fix build with llvm
- [riscv64] fix reserved memory setup
- [arm64] efi: Fix handling of misaligned runtime regions and drop warning
- [mips*] jump_label: Fix compat branch range check
- drm/amdgpu: Fix the lpfn checking condition in drm buddy
- [arm64] mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
- [arm64,armhf] mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
- [arm64,armhf] mmc: sdhci-esdhc-imx: use the correct host caps for
MMC_CAP_8_BIT_DATA
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
- ALSA: hda: fix potential memleak in 'add_widget_node'
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
- ALSA: hda/realtek: Add Positivo C6300 model quirk
- ALSA: usb-audio: Yet more regression for for the delayed card registration
- ALSA: usb-audio: Add quirk entry for M-Audio Micro
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60
- vmlinux.lds.h: Fix placement of '.data..decrypted' section
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
- nilfs2: fix deadlock in nilfs_count_free_blocks()
- nilfs2: fix use-after-free bug of ns_writer on remount
- [x86] drm/i915/dmabuf: fix sg_table handling in map_dma_buf
- drm/amd/display: Fix reg timeout in enc314_enable_fifo
- drm/amd/pm: update SMU IP v13.0.4 msg interface header
- drm/amd/display: Update SR watermarks for DCN314
- drm/amdgpu: workaround for TLB seq race
- drm/amdgpu: disable BACO on special BEIGE_GOBY card
- [x86] platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
- btrfs: fix match incorrectly in dev_args_match_device
- btrfs: zoned: clone zoned device info when cloning a device
- btrfs: zoned: initialize device's zone info for seeding
- io_uring: check for rollover of buffer ID when providing buffers
- [arm64] phy: qcom-qmp-combo: fix NULL-deref on runtime resume
- [arm64,armhf] mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- [x86] arch/x86/mm/hugetlbpage.c: pud_huge() returns 0 when using 2-level
paging (Closes: #1023025)
- [amd64,arm64] mm: hugetlb_vmemmap: include missing linux/moduleparam.h
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual
Addressing
- [amd64] mm/memremap.c: map FS_DAX device memory as decrypted
- mm/shmem: use page_mapping() to detect page cache for uffd continue
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- can: isotp: fix tx state handling for echo tx processing
- [x86] KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range()
- [x86] KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't
exist yet
- [x86] KVM: x86: use a separate asm-offsets.c file
- [x86] KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm
- [x86] KVM: SVM: adjust register allocation for __svm_vcpu_run()
- [x86] KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level
- [x86] KVM: SVM: retrieve VMCB from assembly
- [x86] KVM: SVM: move guest vmsave/vmload back to assembly
- can: dev: fix skb drop check
- ALSA: memalloc: Try dma_alloc_noncontiguous() at first
- [x86] cpu: Restore AMD's DE_CFG MSR after resume
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10
- [arm64] drm/msm/gpu: Fix crash during system suspend after unbind
- [x86] ASoC: rt5682s: Fix the TDM Tx settings
- [x86] ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15
- [x86] ASoC: Intel: sof_rt5682: Add quirk for Rex board
- [x86] ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo
ThinkBook 16 Gen 4+ ARA to the Quirks List
- [x86] ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table
- drm/amdgpu: Adjust MES polling timeout for sriov
- [x86] platform/x86: thinkpad_acpi: Fix reporting a non present second fan
on some models
- [x86] platform/x86/intel: pmc/core: Add Raptor Lake support to pmc core
driver
- drm/amd/display: Remove wrong pipe control lock
- drm/amd/display: Don't return false if no stream
- drm/scheduler: fix fence ref counting
- ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[]
- btrfs: raid56: properly handle the error when unable to find the missing
stripe
- NFSv4: Retry LOCK on OLD_STATEID during delegation return
- SUNRPC: Fix crasher in gss_unwrap_resp_integ()
- [x86] ACPI: x86: Add another system to quirk list for forcing
StorageD3Enable
- block: blk_add_rq_to_plug(): clear stale 'last' after flush
- [arm64,armhf] i2c: tegra: Allocate DMA memory for DMA engine
- [x86] i2c: i801: add lis3lv02d's I2C address for Vostro 5568
- btrfs: remove pointless and double ulist frees in error paths of qgroup
tests
- drm/amd/display: Ignore Cable ID Feature
- drm/amd/display: Enable timing sync on DCN32
- drm/amdgpu: set fb_modifiers_not_supported in vkms
- drm/amd: Fail the suspend if resources can't be evicted
- drm/amd/display: Fix DCN32 DSC delay calculation
- drm/amd/display: Use forced DSC bpp in DML
- drm/amd/display: Round up DST_after_scaler to nearest int
- drm/amd/display: Investigate tool reported FCLK P-state deviations
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
- [x86] cpu: Add several Intel server CPU model numbers
- cifs: always iterate smb sessions using primary channel
- [arm64] mm: fold check for KFENCE into can_set_direct_map()
- [arm64] fix rodata=full again
- hugetlb: rename remove_huge_page to hugetlb_delete_from_page_cache
- hugetlbfs: don't delete error page from pagecache
- [x86] KVM: SVM: remove dead field from struct svm_cpu_data
- [x86] KVM: SVM: do not allocate struct svm_cpu_data dynamically
- [x86] KVM: SVM: restore host save area from assembly
- [x86] KVM: SVM: move MSR_IA32_SPEC_CTRL save/restore to assembly
- [arm64] dts: qcom: sa8155p-adp: Specify which LDO modes are allowed
- [arm64] dts: qcom: sa8295p-adp: Specify which LDO modes are allowed
- [arm64] dts: qcom: sc8280xp-crd: Specify which LDO modes are allowed
- [arm64] dts: qcom: sm8350-hdk: Specify which LDO modes are allowed
- [armhf] spi: stm32: Print summary 'callbacks suppressed' message
- ASoC: core: Fix use-after-free in snd_soc_exit()
- [arm64] ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N
- [arm64] tty: serial: fsl_lpuart: don't break the on-going transfer when
global reset
- [arm64,armhf] serial: imx: Add missing .thaw_noirq hook
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
- ASoC: rt5514: fix legacy dai naming
- ASoC: rt5677: fix legacy dai naming
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
- bnxt_en: refactor bnxt_cancel_reservations()
- bnxt_en: fix the handling of PCIE-AER
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
- [arm64,armhf] pinctrl: rockchip: list all pins in a possible mux route for
PX30
- scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
- sctp: remove the unnecessary sinfo_stream check in
sctp_prsctp_prune_unsent
- sctp: clear out_curr if all frag chunks of current msg are pruned
- erofs: clean up .read_folio() and .readahead() in fscache mode
- erofs: get correct count for unmapped range in fscache mode
- block: sed-opal: kmalloc the cmd/resp buffers
- nfsd: put the export reference in nfsd4_verify_deleg_dentry
- bpf: Fix memory leaks in __check_func_call
- io_uring: calculate CQEs from the user visible value
- nvmet: fix a memory leak
- parport_pc: Avoid FIFO port location truncation
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
- [arm*] drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms
- [arm64,armhf] drm/panel: simple: set bpc field for logic technologies
displays
- drm/drv: Fix potential memory leak in drm_dev_init()
- [arm64] dts: imx8mm-tqma8mqml-mba8mx: Fix USB DR
- erofs: put metabuf in error path in fscache mode
- ata: libata-transport: fix double ata_host_put() in ata_tport_add()
- ata: libata-transport: fix error handling in ata_tport_add()
- ata: libata-transport: fix error handling in ata_tlink_add()
- ata: libata-transport: fix error handling in ata_tdev_add()
- nfp: change eeprom length to max length enumerators
- [mips*] fix duplicate definitions for exported symbols
- io_uring/poll: fix double poll req->flags races
- cifs: Fix connections leak when tlink setup failed
- bpf: Initialize same number of free nodes for each pcpu_freelist
- ata: libata-core: do not issue non-internal commands once EH is pending
- mISDN: fix possible memory leak in mISDN_dsp_element_register()
- net: hinic: Fix error handling in hinic_module_init()
- net: phy: dp83867: Fix SGMII FIFO depth for non OF devices
- net: stmmac: ensure tx function is not running in stmmac_xdp_release()
- [arm64] soc: imx8m: Enable OCOTP clock before reading the register
- net: liquidio: release resources when liquidio driver open failed
- mISDN: fix misuse of put_device() in mISDN_register_device()
- net: macvlan: Use built-in RCU list checking
- bnxt_en: Remove debugfs when pci_register_driver failed
- [arm64,armhf] drm/lima: Fix opp clkname setting in case of missing
regulator
- net: mhi: Fix memory leak in mhi_net_dellink()
- [arm64,armhf] net: dsa: make dsa_master_ioctl() see through
port_hwtstamp_get() shims
- xen/pcpu: fix possible memory leak in register_pcpu()
- erofs: fix missing xas_retry() in fscache mode
- mlxsw: Avoid warnings when not offloaded FDB entry with IPv6 is removed
- net: ena: Fix error handling in ena_init()
- [arm64] net: hns3: fix incorrect hw rss hash type of rx packet
- [arm64] net: hns3: fix return value check bug of rx copybreak
- [arm64] net: hns3: fix setting incorrect phy link ksettings for firmware
in resetting process
- bridge: switchdev: Fix memory leaks when changing VLAN protocol
- drbd: use after free in drbd_create_device()
- [x86] platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when
virtualized
- [x86] platform/surface: aggregator: Do not check for repeated unsequenced
packets
- netfs: Fix missing xas_retry() calls in xarray iteration
- netfs: Fix dodgy maths
- cifs: add check for returning value of SMB2_close_init
- [arm64,armhf] net: dsa: don't leak tagger-owned storage on switch driver
unbind
- cifs: Fix wrong return value checking when GETFLAGS
- [x86] net: thunderbolt: Fix error handling in tbnet_init()
- cifs: add check for returning value of SMB2_set_info_init
- block: make dma_alignment a stacking queue_limit
- dm-crypt: provide dma_alignment limit in io_hints
- ftrace: Fix the possible incorrect kernel message
- ftrace: Optimize the allocation for mcount entries
- ftrace: Fix null pointer dereference in ftrace_add_mod()
- ring_buffer: Do not deactivate non-existant pages
- tracing: Fix memory leak in tracing_read_pipe()
- tracing/ring-buffer: Have polling block on watermark
- tracing: Fix memory leak in test_gen_synth_cmd() and
test_empty_synth_event()
- tracing: Fix wild-memory-access in register_synth_event()
- tracing: Fix race where eprobes can be called before the event
- tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in
kprobe_event_gen_test_exit()
- tracing: kprobe: Fix potential null-ptr-deref on trace_array in
kprobe_event_gen_test_exit()
- [x86] rethook: fix a potential memleak in rethook_alloc()
- [amd64] platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks
- [amd64] platform/x86/amd: pmc: Add new ACPI ID AMDI0009
- drm/amd/pm: enable runpm support over BACO for SMU13.0.7
- drm/amd/pm: enable runpm support over BACO for SMU13.0.0
- drm/amd/pm: fix SMU13 runpm hang due to unintentional workaround
- drm/display: Don't assume dual mode adaptors support i2c sub-addressing
- drm/amd/display: Fix invalid DPIA AUX reply causing system hang
- drm/amd/display: Add HUBP surface flip interrupt handler
- drm/amd/display: Fix access timeout to DPIA AUX at boot time
- drm/amd/display: Support parsing VRAM info v3.0 from VBIOS
- drm/amd/display: Fix optc2_configure warning on dcn314
- drm/amd/display: don't enable DRM CRTC degamma property for DCE
- drm/amd/display: Fix prefetch calculations for dcn32
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
- ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
- [arm64,armhf] Revert "usb: dwc3: disable USB core PHY management"
- [arm64,armhf] usb: dwc3: Do not get extcon device when usb-role-switch is
used
- io_uring: update res mask in io_poll_check_events
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000
- slimbus: stream: correct presence rate frequencies
- speakup: fix a segfault caused by switching consoles
- USB: serial: option: add Sierra Wireless EM9191
- USB: serial: option: remove old LARA-R6 PID
- USB: serial: option: add u-blox LARA-R6 00B modem
- USB: serial: option: add u-blox LARA-L6 modem
- USB: serial: option: add Fibocom FM160 0x0111 composition
- usb: add NO_LPM quirk for Realforce 87U Keyboard
- [x86] usb: typec: tipd: Prevent uninitialized event{1,2} in IRQ handler
- iio: accel: bma400: Ensure VDDIO is enable defore reading the chip ID.
- iio: pressure: ms5611: fixed value compensation bug
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited
- dm bufio: Fix missing decrement of no_sleep_enabled if
dm_bufio_client_create failed
- dm ioctl: fix misbehavior if list_versions races with module loading
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
- serial: 8250: Flush DMA Rx on RLSI
- [x86] serial: 8250_lpss: Configure DMA also w/o DMA filter
- [x86] serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake
- io_uring: fix tw losing poll events
- io_uring: fix multishot accept request leaks
- io_uring: fix multishot recv request leaks
- io_uring: disallow self-propelled ring polling
- ceph: avoid putting the realm twice when decoding snaps fails
- Input: iforce - invert valid length check when fetching device IDs
- maccess: Fix writing offset in case of fault in
strncpy_from_kernel_nofault()
- net: phy: marvell: add sleep time after enabling the loopback bit
- [s390x] scsi: zfcp: Fix double free of FSF request when qdio send fails
- [amd64] iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
entries
- [amd64] iommu/vt-d: Set SRE bit only when hardware has SRS cap
- firmware: coreboot: Register bus in module init
- mmc: core: properly select voltage range without power cycle
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce
timeout
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
- docs: update mediator contact information in CoC doc
- [s390x] dcssblk: fix deadlock when adding a DCSS
- [x86] misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- blk-cgroup: properly pin the parent in blkcg_css_online
- [amd64] x86/sgx: Add overflow check in sgx_validate_offset_length()
- [x86] fpu: Drop fpregs lock before inheriting FPU permissions
- [x86] perf/x86/amd/uncore: Fix memory leak for events array
- [x86] perf/x86/intel/pt: Fix sampling using single range output
- nvme: restrict management ioctls to admin
- nvme: ensure subsystem reset is single threaded (CVE-2022-3169)
- [x86] ASoC: SOF: topology: No need to assign core ID if token parsing
failed
- perf: Improve missing SIGTRAP checking
- vfio: Rename vfio_ioctl_check_extension()
- vfio: Split the register_device ops call into functions
- [x86] perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf
NMI and throttling
- ring-buffer: Include dropped pages in counting dirty patches
- tracing: Fix warning on variable 'struct trace_array'
- net: usb: smsc95xx: fix external PHY reset
- net: use struct_group to copy ip/ipv6 header addresses
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
- scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
- tracing: Fix potential null-pointer-access of entry in list 'tr->err_log'
- [arm64] mm: fix incorrect file_map_count for non-leaf pmd/pud
- Input: i8042 - fix leaking of platform device on module removal
- macvlan: enforce a consistent minimal mtu
- tcp: cdg: allow tcp_cdg_release() to be called multiple times
- kcm: avoid potential race in kcm_tx_work (CVE-2022-3521)
- [x86] KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier
- gfs2: Check sb_bsize_shift after reading superblock
- gfs2: Switch from strlcpy to strscpy
- 9p/trans_fd: always use O_NONBLOCK read/write
- netlink: Bounds-check struct nlmsgerr creation
- wifi: wext: use flex array destination for memcpy()
- rseq: Use pr_warn_once() when deprecated/unknown ABI flags are encountered
- mm: fs: initialize fsdata passed to write_begin/write_end interface
- net/9p: use a dedicated spinlock for trans_fd
- bpf: Prevent bpf program recursion for raw tracepoint probes
- ntfs: fix use-after-free in ntfs_attr_find()
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- ntfs: check overflow when iterating ATTR_RECORDs
.
[ Santiago Ruano Rincón ]
* net/cdc_ncm: Fix multicast RX support for CDC NCM devices with ZLP
(Closes: #1024328)
.
[ Salvatore Bonaccorso ]
* Bump ABI to 5
* net: neigh: decrement the family specific qlen (Closes: #1024070)
.
linux (6.0.8-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.8
- [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft
disconnect
- [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on
delayed_status
- RDMA/cma: Use output interface for net_dev check
- [amd64] IB/hfi1: Correctly move list in sc_disable()
- [arm64] RDMA/hns: Disable local invalidate operation
- [arm64] RDMA/hns: Fix NULL pointer problem in free_mr_init()
- RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
- NFSv4: Fix a potential state reclaim deadlock
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
- SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
- NFSv4.2: Fixup CLONE dest file size for zero-length count
- nfs4: Fix kmemleak when allocate slot failed
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
- [arm64,armhf] net: dsa: fall back to default tagger if we can't load the
one from DT
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
- [arm64,armhf] net: fec: fix improper use of NETDEV_TX_BUSY
- [amd64,i386] ata: pata_legacy: fix pdc20230_set_piomode()
- net: sched: Fix use after free in red_enqueue()
- net: tun: fix bugs for oversize packet when napi frags enabled
- netfilter: nf_tables: netlink notifier might race to release objects
- netfilter: nf_tables: release flow rule object from commit path
- sfc: Fix an error handling path in efx_pci_probe()
- nfsd: fix nfsd_file_unhash_and_dispose
- nfsd: fix net-namespace logic in __nfsd_file_cache_purge
- ipvs: use explicitly signed chars
- ipvs: fix WARNING in __ip_vs_cleanup_batch()
- ipvs: fix WARNING in ip_vs_app_net_cleanup()
- rose: Fix NULL pointer dereference in rose_send_frame()
- mISDN: fix possible memory leak in mISDN_register_device()
- btrfs: fix inode list leak during backref walking at
resolve_indirect_refs()
- btrfs: fix inode list leak during backref walking at find_parent_nodes()
- btrfs: fix ulist leaks in error paths of qgroup self tests
- netfilter: ipset: enforce documented limit to prevent allocating huge
memory
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
- Bluetooth: hci_conn: Fix CIS connection dst_type handling
- Bluetooth: virtio_bt: Use skb_put to set length
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bluetooth: L2CAP: Fix memory leak in vhci_write
- Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register
- net/smc: Fix possible leaked pernet namespace in smc_init()
- net, neigh: Fix null-ptr-deref in neigh_table_clear()
- bridge: Fix flushing of dynamic FDB entries
- ipv6: fix WARNING in ip6_route_net_exit_late()
- vsock: fix possible infinite sleep in vsock_connectible_wait_data()
- [arm64] media: rkisp1: Fix source pad format configuration
- [arm64] media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
- [arm64] media: rkisp1: Initialize color space on resizer sink and source
pads
- [arm64] media: rkisp1: Use correct macro for gradient registers
- [arm64] media: rkisp1: Zero v4l2_subdev_format fields in when validating
links
- media: dvb-frontends/drxk: initialize err to 0
- [arm64] media: meson: vdec: fix possible refcount leak in vdec_probe()
- [arm64,armhf] media: hantro: Store HEVC bit depth in context
- [arm64,armhf] media: hantro: HEVC: Fix auxilary buffer size calculation
- [arm64,armhf] media: hantro: HEVC: Fix chroma offset computation
- [arm*] drm/vc4: hdmi: Check the HSM rate at runtime_resume
- ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
- [arm*] hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
- io_uring: don't iopoll from io_ring_ctx_wait_and_kill()
- scsi: core: Restrict legal sdev_state transitions via sysfs
- HID: saitek: add madcatz variant of MMO7 mouse device ID
- drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV
case
- drm/amd/pm: skip loading pptable from driver on secure board for
smu_v13_0_10
- drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
- drm/amdgpu: dequeue mes scheduler during fini
- nvme-pci: disable write zeroes on various Kingston SSD
- bio: safeguard REQ_ALLOC_CACHE bio put
- [arm64] dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
- efi/tpm: Pass correct address to memblock_reserve
- [arm64,armhf] drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error
messages
- [arm64,armhf] drm/rockchip: fix fbdev on non-IOMMU devices
- [x86] drm/i915: stop abusing swiotlb_max_segment
- block: Fix possible memory leak for rq_wb on add_disk failure
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- i2c: piix4: Fix adapter not be removed in piix4_remove()
- fscrypt: stop using keyrings subsystem for fscrypt_master_key
- fscrypt: fix keyring memory leak on mount failure
- btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
- btrfs: fix tree mod log mishandling of reallocated nodes
- btrfs: fix type of parameter generation in btrfs_get_dentry
- btrfs: don't use btrfs_chunk::sub_stripes from disk
- btrfs: fix a memory allocation failure test in btrfs_submit_direct
- [amd64,arm64] ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
- ftrace: Fix use-after-free for dynamic ftrace_ops
- tracing/fprobe: Fix to check whether fprobe is registered correctly
- fprobe: Check rethook_alloc() return in rethook initialization
- tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
- kprobe: reverse kp->flags when arm_kprobe failed
- ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
(Closes: #1023726)
- tracing/histogram: Update document for KEYS_MAX size
- capabilities: fix potential memleak on error path from
vfs_getxattr_alloc()
- fuse: add file_modified() to fallocate
- fuse: fix readdir cache race
- efi: random: reduce seed size to 32 bytes
- efi: random: Use 'ACPI reclaim' memory for random seed
- efi: efivars: Fix variable writes with unsupported query_variable_store()
(Closes: #1022900)
- net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
- [arm64] entry: avoid kprobe recursion
- [armhf] dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on
Q/QP
- [x86] perf/x86/intel: Fix pebs event constraints for ICL
- [x86] perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
- [x86] perf/x86/intel: Fix pebs event constraints for SPR
- net: remove SOCK_SUPPORT_ZC from sockmap
- net: also flag accepted sockets supporting msghdr originated zerocopy
- ext4: fix warning in 'ext4_da_release_space'
- ext4: fix BUG_ON() when directory entry has invalid rec_len
- ext4: update the backup superblock's at the end of the online resize
(Closes: #1023450)
- [x86] syscall: Include asm/ptrace.h in syscall_wrapper header
- [x86] KVM: x86: Mask off reserved bits in CPUID.80000006H
- [x86] KVM: x86: Mask off reserved bits in CPUID.8000001AH
- [x86] KVM: x86: Mask off reserved bits in CPUID.80000008H
- [x86] KVM: x86: Mask off reserved bits in CPUID.80000001H
- [x86] KVM: x86: Mask off reserved bits in CPUID.8000001FH
- [x86] KVM: VMX: Advertise PMU LBRs if and only if perf supports LBRs
- [x86] KVM: VMX: Fold vmx_supported_debugctl() into
vcpu_supported_debugctl()
- [x86] KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
- [x86] KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING
unavailable
- [x86] KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
- [x86] KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
- [arm64] KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
- [x86] KVM: x86: smm: number of GPRs in the SMRAM image depends on the
image format
- [x86] KVM: x86: emulator: em_sysexit should update ctxt->mode
- [x86] KVM: x86: emulator: introduce emulator_recalc_and_set_mode
- [x86] KVM: x86: emulator: update the emulation mode after rsm
- [x86] KVM: x86: emulator: update the emulation mode after CR0 write
- ext4,f2fs: fix readahead of verity data
- cifs: fix regression in very old smb1 mounts
- [arm64,armhf] drm/rockchip: dsi: Clean up 'usage_mode' when failing to
attach
- [arm64,armhf] drm/rockchip: dsi: Force synchronous probe
- drm/amdgpu: disable GFXOFF during compute for GFX11
- drm/amd/display: Update latencies on DCN321
- drm/amd/display: Update DSC capabilitie for DCN314
- [x86] drm/i915/sdvo: Filter out invalid outputs more sensibly
- [x86] drm/i915/sdvo: Setup DDC fully before output init
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
(CVE-2022-3628)
.
[ Vincent Blut ]
* [x86] drivers/platform/x86: Enable GIGABYTE_WMI as module
(Closes: #1023613)
.
[ Salvatore Bonaccorso ]
* Bump ABI to 4
.
linux (6.0.7-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.7
- can: j1939: transport: j1939_session_skb_drop_old():
spin_unlock_irqrestore() before kfree_skb()
- can: kvaser_usb: Fix possible completions during init_completion
- ALSA: Use del_timer_sync() before freeing timer
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
- ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600
- ALSA: hda/realtek: Add another HP ZBook G9 model quirks
- ALSA: control: add snd_ctl_rename()
- ALSA: hda/realtek: Use snd_ctl_rename() to rename a control
- ALSA: emu10k1: Use snd_ctl_rename() to rename a control
- ALSA: ac97: Use snd_ctl_rename() to rename a control
- ALSA: usb-audio: Use snd_ctl_rename() to rename a control
- ALSA: ca0106: Use snd_ctl_rename() to rename a control
- ALSA: au88x0: use explicitly signed char
- ALSA: rme9652: use explicitly signed char
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
- usb: gadget: uvc: limit isoc_sg to super speed gadgets
- Revert "usb: gadget: uvc: limit isoc_sg to super speed gadgets"
- usb: gadget: uvc: fix dropped frame after missed isoc
- usb: gadget: uvc: fix sg handling in error case
- usb: gadget: uvc: fix sg handling during video encode
- [armhf] usb: gadget: aspeed: Fix probe regression
- [arm64,armhf] usb: dwc3: gadget: Stop processing more requests on IMI
- [arm64,armhf] usb: dwc3: gadget: Don't set IMI for no_interrupt
- [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft
disconnect
- [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on
delayed_status
- usb: typec: ucsi: Check the connection on resume
- usb: typec: ucsi: acpi: Implement resume callback
- [arm64,armhf] usb: dwc3: st: Rely on child's compatible instead of name
- [arm64,armhf] usb: dwc3: Don't switch OTG -> peripheral if extcon is
present
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96
controller
- squashfs: fix read regression introduced in readahead code
(Closes: #1023167)
- squashfs: fix extending readahead beyond end of file
- squashfs: fix buffer release race condition in readahead code
- xhci: Add quirk to reset host back to default state at shutdown
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
- xhci: Remove device endpoints from bandwidth list when freeing the device
- iio: light: tsl2583: Fix module unloading
- iio: temperature: ltc2983: allocate iio channels once
- iio: adxl372: Fix unsafe buffer attributes
- fbdev: smscufx: Fix several use-after-free bugs
- [x86] cpufreq: intel_pstate: Read all MSRs on the target CPU
- [x86] cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
- fs/binfmt_elf: Fix memory leak in load_elf_binary()
- exec: Copy oldsighand->action under spin-lock
- mac802154: Fix LQI recording
- scsi: qla2xxx: Use transport-defined speed mask for supported_speeds
- drm/amdgpu: Fix VRAM BO swap issue
- drm/amdgpu: Fix for BO move issue
- [x86] drm/i915: Extend Wa_1607297627 to Alderlake-P
- drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x
- drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume
- drm/amdgpu: fix pstate setting issue
- drm/amd/display: Revert logic for plane modifiers
- [arm64] drm/msm: fix use-after-free on probe deferral
- [arm64] drm/msm/dsi: fix memory corruption with too many bridges
- [arm64] drm/msm/hdmi: fix memory corruption with too many bridges
- [arm64] drm/msm/hdmi: fix IRQ lifetime
- [arm64] drm/msm/dp: fix memory corruption with too many bridges
- [arm64] drm/msm/dp: fix aux-bus EP lifetime
- [arm64] drm/msm/dp: fix IRQ lifetime
- [arm64] drm/msm/dp: fix bridge lifetime
- random: use arch_get_random*_early() in random_init()
- mmc: block: Remove error check of hw_reset on reset
- mmc: queue: Cancel recovery work on cleanup
- mmc: core: Fix kernel panic when remove non-standard SDIO card
- mmc: core: Fix WRITE_ZEROES CQE handling
- mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
- [arm64,armhf] mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on
8bit bus
- mm: migrate: fix return value if all subpages of THPs are migrated
successfully
- mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on
hugetlbfs
- mm/huge_memory: do not clobber swp_entry_t during THP split
- mm: prep_compound_tail() clear page->private
- kernfs: fix use-after-free in __kernfs_remove
- Revert "dt-bindings: pinctrl-zynqmp: Add output-enable configuration"
- pinctrl: Ingenic: JZ4755 bug fixes
- [s390x] boot: add secure boot trailer
- [s390x] cio: fix out-of-bounds access on cio_ignore free
- [s390x] uaccess: add missing EX_TABLE entries to __clear_user()
- [s390x] futex: add missing EX_TABLE entry to __futex_atomic_op()
- [s390x] pci: add missing EX_TABLE entries to
__pcistg_mio_inuser()/__pcilg_mio_inuser()
- ethtool: eeprom: fix null-deref on genl_info in dump
- fbdev/core: Avoid uninitialized read in
aperture_remove_conflicting_pci_device()
- [amd64,arm64] ACPI: PCC: Fix unintentional integer overflow
- net: ieee802154: fix error return code in dgram_bind()
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
- [arm64] drm/msm/a6xx: Replace kcalloc() with kvzalloc()
- [arm64] drm/msm/dp: add atomic_check to bridge ops
- [arm64] drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
- [arm64] drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link
training
- [arm64] ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile
- [arm64] drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage
- erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy()
- erofs: fix up inplace decompression success rate
- [arm64] pinctrl: qcom: Avoid glitching lines when we first mux to output
- [arm64] spi: qup: support using GPIO as chip select line
- [x86] fpu: Configure init_fpstate attributes orderly
- [x86] fpu: Fix the init_fpstate size check with the actual size
- [x86] fpu: Exclude dynamic states from init_fpstate
- sched/core: Fix comparison in sched_group_cookie_match()
- bpf: prevent decl_tag from being referenced in func_proto
- mtd: core: add missing of_node_get() in dynamic partitions code
- [x86] ASoC: SOF: Intel: pci-mtl: fix firmware name
- [armhf] spi: aspeed: Fix window offset of CE1
- [arm64] ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile
- [x86] ASoC: Intel: common: add ACPI matching tables for Raptor Lake
- [x86] ASoC: SOF: Intel: pci-tgl: use RPL specific firmware definitions
- [x86] ASoC: SOF: Intel: pci-tgl: fix ADL-N descriptor
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
- [x86] perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of
clear_cpu_cap()
- rcu: Keep synchronize_rcu() from enabling irqs in early boot
- tipc: fix a null-ptr-deref in tipc_topsrv_accept
- [arm64] net: netsec: fix error handling in netsec_register_mdio()
- net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg()
- net: hinic: fix memory leak when reading function table
- net: hinic: fix the issue of CMDQ memory leaks
- net: hinic: fix the issue of double release MBOX callback of VF
- [arm64] net: macb: Specify PHY PM management done by MAC
- [x86] unwind/orc: Fix unreliable stack dump with gcov
- [x86] fpu: Fix copy_xstate_to_uabi() to copy init states correctly
- [amd64,arm64] amd-xgbe: Yellow carp devices do not need rrc
- [amd64,arm64] amd-xgbe: fix the SFP compliance codes check for DAC cables
- [amd64,arm64] amd-xgbe: add the bit rate quirk for Molex cables
- [x86] drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all
dGPU
- [x86] drm/i915/dp: Reset frl trained flag before restarting FRL training
- atlantic: fix deadlock at aq_nic_stop
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
- tcp: fix indefinite deferral of RTO with SACK reneging
- mptcp: set msk local address earlier
- can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in
error path
- PM: hibernate: Allow hybrid sleep to work with s2idle
- media: vivid: s_fbuf: add more sanity checks
- media: vivid: dev->bitmap_cap wasn't freed in all cases
- media: v4l2-dv-timings: add sanity checks for blanking values
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
- media: vivid: set num_in/outputs to 0 if not supported
- ipv6: ensure sane device mtu in tunnels
- i40e: Fix ethtool rx-flow-hash setting for X722
- i40e: Fix VF hang when reset is triggered on another VF
- i40e: Fix flow-type by setting GL_HASH_INSET registers
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
- PM: domains: Fix handling of unavailable/disabled idle states
- [arm64,armhf] net: fec: limit register access on i.MX6UL
- openvswitch: switch from WARN to pr_warn
- nh: fix scope used to find saddr when adding non gw nh
- net/mlx5e: Do not increment ESN when updating IPsec ESN state
- net/mlx5: Wait for firmware to enable CRS before pci_restore_state
- net/mlx5: DR, Fix matcher disconnect error flow
- net/mlx5e: Extend SKB room check to include PTP-SQ
- net/mlx5e: Update restore chain id for slow path packets
- net/mlx5: ASO, Create the ASO SQ with the correct timestamp format
- net/mlx5: Fix possible use-after-free in async command interface
- net/mlx5e: TC, Reject forwarding from internal port to internal port
- net/mlx5: Update fw fatal reporter state on PCI handlers successful
recover
- net/mlx5: Fix crash during sync firmware reset
- net: do not sense pfmemalloc status in skb_append_pagefrags()
- [arm64] net: enetc: survive memory pressure without crashing
- [arm64] Add AMPERE1 to the Spectre-BHB affected list
- tcp/udp: Fix memory leak in ipv6_renew_options(). (CVE-2022-3524)
.
[ Salvatore Bonaccorso ]
* wifi: ath11k: avoid deadlock during regulatory update in
ath11k_regd_update() (Closes: #1023329)
* Bump ABI to 3 (Fixes FTBFS on arm64 and armhf) (Closes: #1023298)
* Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
(CVE-2022-42896)
* Bluetooth: L2CAP: Fix attempting to access uninitialized memory
(CVE-2022-42895)
.
linux (6.0.6-2) unstable; urgency=medium
.
* Ignore ABI changes for ahci_fill_cmd_slot, phylink_create and
phylink_generic_validate
.
linux (6.0.6-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.6
- video/aperture: Call sysfb_disable() before removing PCI devices
- ocfs2: clear dinode links count in case of error
- ocfs2: fix BUG when iput after ocfs2_mknod fails
- smb3: interface count displayed incorrectly
- selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
- [x86] microcode/AMD: Apply the patch early on every logical thread
- [x86] hwmon/coretemp: Handle large core ID value
- [armhf] ata: ahci-imx: Fix MODULE_ALIAS
- [x86] resctrl: Fix min_cbm_bits for AMD
- drm/amdgpu: fix sdma doorbell init ordering on APUs
- mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
- kvm: Add support for arch compat vm ioctls
- [x86] KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
- x[86] KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
- [arm64] KVM: arm64: vgic: Fix exit condition in scan_its_table()
- media: mceusb: set timeout to at least timeout provided
- [x86] topology: Fix multiple packages shown on a single-package system
- [x86] topology: Fix duplicated core ID within a package
- [amd64] platform/x86/amd: pmc: Read SMU version during suspend on Cezanne
systems
- dm bufio: use the acquire memory barrier when testing for B_READING
- btrfs: fix processing of delayed data refs during backref walking
- btrfs: fix processing of delayed tree block refs during backref walking
- [arm*] drm/vc4: Add module dependency on hdmi-codec
- [arm*] drm/vc4: hdmi: Enforce the minimum rate at runtime_resume
- ACPI: extlog: Handle multiple records
- tipc: Fix recognition of trial period
- tipc: fix an information leak in tipc_topsrv_kern_subscr
- i40e: Fix DMA mappings leak
- tls: strp: make sure the TCP skbs do not have overlapping data
- HID: magicmouse: Do not set BTN_MOUSE on double report
- sfc: Change VF mac via PF as first preference if available.
- net/atm: fix proc_mpc_write incorrect return value
- net: phy: dp83867: Extend RX strap quirk for SGMII mode
- net/smc: Fix an error code in smc_lgr_create()
- net: phylink: add mac_managed_pm in phylink_config structure
- net: stmmac: Enable mac_managed_pm phylink config
- skmsg: pass gfp argument to alloc_sk_msg()
- erofs: shouldn't churn the mapping page for duplicated copies
- blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()
- io_uring/rw: remove leftover debug statement
- scsi: lpfc: Fix memory leak in lpfc_create_port()
- udp: Update reuse->has_conns under reuseport_lock.
- ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed
- cifs: Fix xid leak in cifs_create()
- cifs: Fix xid leak in cifs_copy_file_range()
- cifs: Fix xid leak in cifs_flock()
- cifs: Fix xid leak in cifs_ses_add_channel()
- cifs: Fix memory leak when build ntlmssp negotiate blob failed
- dm: remove unnecessary assignment statement in alloc_dev()
- drm/amd/display: Increase frame size limit for display_mode_vba_util_32.o
- bnxt_en: fix memory leak in bnxt_nvm_test()
- netfilter: rpfilter/fib: Populate flowic_l3mdev field
- netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
- netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
- nvme-hwmon: consistently ignore errors from nvme_hwmon_init
- nvme-hwmon: kmalloc the NVME SMART log buffer
- nvmet: fix workqueue MEM_RECLAIM flushing dependency
- net: sched: cake: fix null pointer access issue when cake_init() fails
- net: sched: delete duplicate cleanup of backlog and qlen
- net: sched: sfb: fix null pointer access issue when sfb_init() fails
- net: Fix return value of qdisc ingress handling on success
- io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()
- sfc: include vport_id in filter spec hash and equal()
- [arm64] net: hns: fix possible memory leak in hnae_ae_register()
- net: sched: fix race condition in qdisc_graft()
- net: phy: dp83822: disable MDI crossover status change interrupt
- drbd: only clone bio if we have a backing device
- [amd64] iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
- [amd64] iommu/vt-d: Clean up si_domain in the init_dmars() error path
- wifi: mt76: mt7921e: fix random fw download fail
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
- ext4: introduce EXT4_FC_TAG_BASE_LEN helper
- ext4: factor out ext4_fc_get_tl()
- ext4: fix potential out of bound read in ext4_fc_replay_scan()
- ACPI: video: Force backlight native for more TongFang devices
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref
.
linux (6.0.5-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.4
- [x86] drm/i915/bios: Validate fp_timing terminator presence
- [x86] drm/i915/bios: Use hardcoded fp_timing size for generating LFP data
pointers
- pinctrl: amd: change dev_warn to dev_dbg for additional feature support
- [x86] thermal: intel_powerclamp: Use first online CPU as control_cpu
- io_uring/net: fail zc send when unsupported by socket
- HID: playstation: stop DualSense output work on remove.
- HID: playstation: add initial DualSense Edge controller support
- net: flag sockets supporting msghdr originated zerocopy
- drm/amd/pm: fulfill SMU13.0.7 cstate control interface
- drm/amd/pm: add SMU IP v13.0.4 IF version define to V7
- drm/amd/pm: disable cstate feature for gpu reset scenario
- drm/amd/pm: fulfill SMU13.0.0 cstate control interface
- drm/amd/pm: update SMU IP v13.0.4 driver interface version
- dm clone: Fix typo in block_device format specifier
- efi: efivars: Fix variable writes without query_variable_store()
- efi: ssdt: Don't free memory if ACPI table was loaded successfully
- gcov: support GCC 12.1 and newer compilers
- io-wq: Fix memory leak in worker creation
- fbdev/core: Remove remove_conflicting_pci_framebuffers()
- Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()"
(Closes: #1022544)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.5
- [arm64,armhf] clk: tegra: Fix Tegra PWM parent clock
- Revert "btrfs: call __btrfs_remove_free_space_cache_locked on cache load
failure" (Closes: #1022848)
.
[ Salvatore Bonaccorso ]
* [rt] Update to 6.0.5-rt14
* Ignore ABI changes doe to removed check_var_size, check_var_size_nonblocking
and remove_conflicting_pci_framebuffers
Checksums-Sha1:
62dca2a2388a5c3d9d72a27a6ae2572034680990 271325 linux_6.0.12-1~bpo11+1.dsc
63c3788355e52b97a6851203362891c630efecef 1377516 linux_6.0.12-1~bpo11+1.debian.tar.xz
d516c47410f200d5c2066a354dfdde3b79b9d2cd 6097 linux_6.0.12-1~bpo11+1_source.buildinfo
Checksums-Sha256:
cf5d5de30dd2995cb291e1d19a093169ef1d6fb6666a3b66f492bbcbab6fd063 271325 linux_6.0.12-1~bpo11+1.dsc
6fff865ab9c09add334dba6b410bb0f97854672ce0d687c51181dccb76d5b102 1377516 linux_6.0.12-1~bpo11+1.debian.tar.xz
1abcadb1e79655138a5a3c6a8ede0da9dddf278cc0afd5c39ee5312b7d3b4038 6097 linux_6.0.12-1~bpo11+1_source.buildinfo
Files:
7822ea6b0751ab0915e648d617090ed0 271325 kernel optional linux_6.0.12-1~bpo11+1.dsc
49de4dcd2b97964fa9e904d488ee69ac 1377516 kernel optional linux_6.0.12-1~bpo11+1.debian.tar.xz
c188ef1f16ada7012cca0b5d78405c4f 6097 kernel optional linux_6.0.12-1~bpo11+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ShX0
-----END PGP SIGNATURE-----
Reply to: